When Helpful Context Leaks: Privacy Risks in Domain-Adapted ASR
A technique is proposed to automatically construct benchmarks of such attacks and apply it to measure leakage rates across two customisation mechanisms, prompting and fine-tuning, finding that fine-tuning without context prompts offers the best balance.